CVE-2026-93169: dmaengine: zynqmp_dma: fix race between runtime PM and device removal
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: zynqmpdma: fix race between runtime PM and device removal
In zynqmpdmaremove(), runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind (rmmod) path.
Disable runtime PM first, then suspend only if the device is not already suspended. To prevent any further runtime PM transitions.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 17, 2026
CVE Published
via MITRE·04:12 PM
Data Sourced
via MITRE·04:12 PM
Description
Frequently Asked Questions
1
When can this race be triggered?
The race is in the device removal, unbind, or kernel-module removal path, when runtime PM activity can occur while zynqmp_dma_remove() is executing.
2
What condition does the fix enforce during device removal?
It disables runtime PM before checking whether the device is suspended and performing a manual suspend. This prevents further runtime PM transitions during removal.